KR101116065B1 - Communication device and communication method - Google Patents

Abstract

The determination unit 101 can use the communication application using the judgment criteria prepared in advance, based on the communication status including the information of the first network 111 used for the acquisition of the communication application and the communication method in the acquisition. Determine the network. For example, the determination unit 101 determines that the second network 112 is the network used by the communication application. In addition, the communication unit 102 performs communication by the communication application using the network determined by the determination unit 101. For example, the communication unit 102 performs communication by the communication application using the second network 112 determined to be available.

Determining unit, communication unit, first network, second network, application

Description

COMMUNICATION DEVICE AND COMMUNICATION METHOD}

The present invention relates to a communication apparatus, a communication method, and a program for enabling secure execution of a downloaded communication application.

In recent years, the communication terminal is equipped with the some radio communication means, and it is increasing to switch and use a connection network as needed. For example, a terminal having a means for connecting to a cellular network and a means for connecting to a wireless LAN, which can be connected to a cellular network outdoors and to a wireless LAN indoors, has been put into practical use. In such a terminal, various networks may be selectively used or simultaneously used. There are various types of networks to be connected, and the operating policies of the respective networks are greatly different. For example, an IP network of a cellular provider and an enterprise intranet have an authentication and encryption means introduced and can be said to be a very secure network. However, for these free wireless LAN spots, there is no authentication or encryption method, and there is an insecure network.

In addition, recently, a terminal can download a communication application from a network and receive various services using the downloaded application. For example, it is a Java application in a mobile phone. If such a terminal selectively or simultaneously uses a secure network and an insecure network, a safety threat occurs.

For example, consider a malicious application on an insecure network. The terminal downloads such an application and executes the terminal when the application is connected to a secure network. This malicious application can attack a secure network, steal information, and even destroy it within the network.

Consider the case of a Java? Applet below. In the case of a Java? Applet, the applet can normally only communicate with the site from which it was downloaded. For example, an application downloaded from "http://www.example.com" is restricted by Java? VM (Virtual Machine) so that it can only communicate with "www.example.com".

However, insecure networks may not be trusted not only for applications and Web servers, but also for DNS (Domain Name Server). It is possible for a malicious network administrator to install a malicious DNS server and allow users to download applications from a false server. For example, consider a case where a terminal downloads an application from a web server named "http://www.some-secure-server.com". This application is allowed to communicate with www.some-secure-server.com. If a server with the same DNS name exists on a secure network, a malicious application can communicate with the server. So-called attacks against those servers in the network begin. That is, applications on insecure networks can attack servers on secure networks. This is a big problem.

Further, suppose that the terminal has downloaded a legitimate application from "http://www.some-secure-server.com" on a secure network. When the terminal which has downloaded this connection is connected to the above-mentioned malicious network, this application is connected to a false server, so that the contents of communication can be interpreted. In more detail, the communication content of an application on a secure network can be derived and interpreted on an insecure network. This can be a big problem, especially in applications that are closed in secure network environments.

As a means to solve this problem, a method of comparing a communication network corresponding to an application with a communication network currently connected and limiting the function of the application when the communication networks do not match has been proposed (Document 1: Japanese Patent Laid-Open No. 2004-320369). Publication).

<Start of invention>

Problems to be Solved by the Invention

However, in the method disclosed in Document 1, the communication network used by the application is already set in the application in advance or must be set manually by the user. There is no method for automatically determining the communication network. For example, it does not have the ability to automatically associate the application with the network used for download.

SUMMARY OF THE INVENTION The present invention has been made to solve the above problems, and when the terminal (communication device) executes the downloaded communication application, it automatically determines the network to be allowed to use and automatically limits the communication of the application. The purpose.

MEANS FOR SOLVING THE PROBLEMS [

According to one aspect of the present invention, based on a communication situation including information of a network used for acquisition of a communication application and a communication scheme used for acquisition, a network ready for use by the communication application is determined using a criterion prepared in advance. There is provided a communication apparatus including at least one determining means and a communication means for performing communication by a communication application using a network determined by the determining means.

According to one aspect of the present invention, based on a communication situation including information of a network used for acquisition of a communication application and a communication scheme used in acquisition, a network ready to be used by the communication application is determined using determination criteria prepared in advance. There is provided a communication method comprising at least a step of performing communication and a step of performing communication by a communication application using the determined network.

According to an aspect of the present invention, a network available to a communication application is determined using at least a predetermined criterion based on a communication situation including information on the network used to acquire the communication application and a communication scheme used in the acquisition. Also provided is a computer-readable storage medium storing a program for realizing a function for determining and a function for performing communication by a communication application using the determined network.

Effect of the Invention

As described above, according to exemplary aspects of the present invention, communication is made using a determination criteria prepared in advance, based on a communication situation including information of a network used for acquisition of a communication application and a communication scheme used for acquisition. Allows an application to determine the available networks. Therefore, when the terminal (communication device) executes the downloaded communication application, an excellent effect of automatically determining the network permitted to be used and automatically limiting the communication of the application can be obtained.

1 is a configuration diagram showing a configuration example of a communication device according to a first embodiment of the present invention.

2 is a configuration diagram showing an example of the configuration of a communication device according to a second embodiment of the present invention.

3 is a sequence chart for explaining an operation example of a communication device according to a second embodiment of the present invention.

4 is a sequence chart for explaining an operation example of a communication device according to a second embodiment of the present invention.

5 is a configuration diagram showing an example of the configuration of a communication device according to a third embodiment of the present invention.

6 is a sequence chart for explaining an operation example of a communication device according to a third embodiment of the present invention.

BEST MODE FOR CARRYING OUT THE INVENTION [

Next, the best form for implementing this invention is demonstrated in detail with reference to drawings.

<First Embodiment>

First, a first embodiment of the present invention will be described. 1 shows an example of the configuration of a communication device according to a first embodiment of the present invention. This communication apparatus is provided with the determination part 101 and the communication part 102, and connects to the 1st network 111 and the 2nd network 112, and communicates. The determination unit 101 uses the determination criteria prepared in advance based on the communication situation including the information of the first network 111 used for acquisition of the communication application and the communication method used for acquisition. Determine available networks. For example, the determination unit 101 determines that the communication application can use the second network 112. The communication unit 102 performs communication by the communication application using the network determined by the determination unit 101. For example, the communication unit 102 performs communication by the communication application using the second network 112 determined by the determination unit 101.

According to the first embodiment, a decision criterion prepared in advance is made by using a network that a communication application can use, based on a communication situation including information of a network used for acquisition of a communication application and a communication method used for acquisition. Judgment was made. This can be automatically determined by the network which permits use when executing the downloaded communication application. Further, for example, when there is no network determined to be available, the communication unit 102 may prohibit communication of the communication application. Allows the application to restrict communication automatically.

Second Embodiment

Next, a second embodiment of the present invention will be described. 2 shows an example of the configuration of a communication device according to a second embodiment of the present invention. Hereinafter, the portable terminal 1 will be described as an example of the communication device. The terminal 1 is a portable terminal having a plurality of communication bearers (communication function units) such as a wireless LAN, a virtual private network (VPN), W-CDMA, for example, and a communication application download unit (communication application acquisition means) 11 ), A network application reliability determination unit 12, a communication unit 13, an application 14, a communication bearer 15, and an application available network database 16. In addition, the terminal 1 may have a wireless LAN as a communication bearer.

The communication application download section 11 corresponds to, for example, an application downloader in a Java? Environment. In addition to the normal application download function, the communication application download unit 11 acquires the communication status at the time of downloading including the network (download network) used for downloading the application and the encrypted state of the downloaded application, and acquires the acquired information from the network application. There is a function of notifying the network application reliability determination unit 12 as input information necessary for the determination of the reliability.

The network application reliability judging unit 12 receives the communication status at the time of downloading from the communication application download unit 11 and determines a network which the application may use based on this information. The network application reliability determination unit 12 also stores this determination information in the application available network database 16.

The communication unit 13 corresponds to a communication function of an operating system including a protocol stack such as TCP / IP. The communication unit 13 includes a communication protocol 131, a communication provision / decision unit 133, and a communication network information acquisition unit 132. The communication protocol 131 is a communication stack represented by "Socket" or the like, or a protocol stack such as TCP / IP. In addition to the normal data transmission / reception function, the communication protocol 131 has a function of interrupting communication when the application must communicate with the communication network.

The communication provision / decision determination unit 133 corresponds to a function of acquiring network information available by the application stored in the network application reliability determination unit 12 and determining whether network use is available. The communication network information acquisition unit 132 determines the communication bearer 15 used by the application 14 or the communication application download unit 11 to communicate, and notifies the necessary module of the identifier of the communication bearer 15 to be used. do. For example, the communication network information acquisition unit 132 identifies a network to be connected based on the IP address and the setting information of the VPN server, and is connected to the carrier based on the communication attribute information of the SIM. Is identified. In addition, when a plurality of networks can be connected at the same place as a bearer of a wireless LAN network, the identifier of the connected wireless network is notified. For example, the connected network is identified based on communication attribute information such as ESSID and BSSID.

The communication bearer 15 transmits a packet created by the communication unit 13 in a communication bearer 15 such as a wireless LAN interface or a W-CDMA interface, or receives a packet and receives the communication unit 13. It has the function of handing over packets. In addition, when the connected network is a wireless LAN, the terminal may be connected to the network by selecting a required network from a plurality of networks based on designation of an identifier such as an ESSID.

In addition, the wireless LAN network A 2 is a first wireless LAN network. In addition, the wireless LAN network B (3) is a second wireless LAN network. The W-CDMA network 4 is a carrier network represented by W-CDMA or the like.

Next, with reference to the block diagram of FIG. 2 and the sequence chart of FIG. 3, the operation of the communication device (terminal 1) according to the second embodiment will be described in detail. First, the operation when the application 14 is downloaded by the communication application download unit 11 will be described. When receiving a download request from another program such as a user or a browser, the communication application download unit 11 determines the download method based on the URL of the download source. For example, if the prefix of the URL is "http", it is determined that the URL will be downloaded without encryption. If the prefix is "https", the communication application download unit 11 performs encryption to determine that the secure download path is to be used (step S21).

Next, the communication application download unit 11 sends a download request to the communication protocol 131 to obtain the application 14 (step S22). Here, downloading is performed using bearers such as the wireless LAN network A (2), the wireless LAN network B (3), and the W-CDMA network (4). The communication application download unit 11 stores the downloaded program in the storage, and acquires the identification information of the downloaded application 14 by any method. For example, the communication application download unit 11 stores the downloaded program in a storage or the like, and uses the file name generated at the time of application as application identification information (step S23).

Next, the communication application download unit 11 acquires information of the network (download network) used at the time of application download from the communication network information acquisition unit 132. For example, the communication application download unit 11 calls the communication network information acquisition unit 132 with the IP address connected at the time of download as an argument. The communication network information acquisition part 132 called in this way quotes a routing table based on an IP address, specifies the used communication bearer, and returns the information to the communication application download part 11. In addition, when the communication bearer specified by the communication network information acquisition unit 132 is a bearer connectable to a plurality of networks such as a wireless LAN network, the communication network information acquisition unit 132 determines a communication bearer called a wireless LAN. Thereafter, the identifier (for example, ESSID) of the network of the wireless LAN currently connected is returned to the communication application download unit 11 (step S24).

Next, the communication application download unit 11 calls the network application reliability determination unit 12 with the network identification information (application type) and the download method (communication method) acquired in step S24 as arguments, and the network application reliability. By determining by the determination part 12, all the available networks are acquired (step S25). The network application reliability determination unit 12 called from the communication application download unit 11 uses the determination criteria prepared in advance, and determines the available network based on the received information (application type and communication method). Do it.

For example, when the Java application cannot communicate with other than the download source server, the network application reliability determination unit 12 uses the judgment criteria illustrated in Table 1 below to determine whether to permit or prohibit communication. The determination is made.

＼ Communication method
＼
＼
Application type＼ W-CDMA network communication Wireless LAN Network A Communication (HTTPS, with Carrier CA Server Validation) Wireless LAN Network A Communication (HTTP) Download by W-CDMA network (in carrier network)
permission permission Prohibit (avoid communication sequence interpretation) Download by W-CDMA network (outside carrier network)
permission permission permission Download from A by wireless LAN network
Prohibit (Carrier Server Attack Prevention) permission permission

For applications in communication with servers in trusted networks or servers in carrier networks that are not capable of eavesdropping or alteration of communications, assuming that the network is secure, the communication sequences are not encrypted or authentication of the call partner is performed. There may be a communication. If such an application communicates with the wireless LAN network A (2) without network / server authentication, the communication sequence may be analyzed and rewriting of billing information, impersonation of personal information, etc. may occur, which is undesirable.

Suppose you also downloaded the application from a wireless LAN network where the DNS server or network is not trusted. Even if the Java application is an application that can only communicate with the server from which it is downloaded, the environment of the wireless LAN network is set using the same as the carrier network's DNS and IP address, and the terminal 1 is mistaken as if it is communicating with the carrier network. It can be done. In this case, it is preferable that the application downloaded via the wireless LAN network cannot communicate with a server of any carrier network. Therefore, in order to determine the network which can communicate, the judgment criteria shown in Table 1 are necessary.

In the criterion illustrated in Table 1, the first column shows the criterion when downloading a Java? Application from a W-CDMA carrier network. Since the downloaded Java application does not have server authentication, communication by http with the wireless LAN network A (2) that can eavesdrop or change communication is prohibited. However, the communication with the carrier network and the https communication based on the server authentication by the terminal 1 permit communication because the communication sequence is not interpreted or changed.

In the second column of Table 1, the criteria for using the W-CDMA carrier network communication to download a Java application from outside the carrier network by proxy or the like are shown. For example, an application is downloaded from a so-called voluntary site. In this case, since the application is downloading from the carrier network, the DNS server of the carrier network can be trusted. The Java® application communicates through a proxy in the carrier network, so the communication partner is also trusted. The application also presupposes the use of unreliable networks such as wireless LANs. That is, a measure of self-defense is carried out for eavesdropping or modification of communication, or only data which is not harmed by eavesdropping or changing is transmitted. Therefore, communication in all communication paths is permitted.

In the 3rd column, the judgment standard at the time of downloading using the wireless LAN network A (2) is shown. Since the Java application downloaded using the wireless LAN network A (2) cannot trust the DNS server and the network, communication with the server in the carrier network is prohibited to prevent any attack against the carrier network. On the other hand, communication with a wireless LAN network allows communication without distinction between http and https.

After determining the available network based on the above criterion, the communication application download unit 11 associates all available networks acquired in step S25 with the application identifier to the application available network database 16. To the terminal (step S26).

Next, an operation when the application 14 transmits data will be described using the sequence chart of FIG. 4. When the application 14 intends to transmit data to the communication protocol 131 (step S31), the communication protocol 131 receives identification information of the network used for communication from the communication network information acquisition unit 132. Acquire (request) (step S32). In response to this request, the communication network information acquisition unit 132 specifies the bearer used by quoting the routing table based on, for example, the IP address of the communication partner, and returns the information to the communication application download unit 11 ( Step S33). In addition, when the bearer specified by the communication network information acquisition unit 132 is a bearer connectable to a plurality of networks such as a wireless LAN network, the communication network information acquisition unit 132 determines the bearer, and is currently connected. The identifier (for example, ESSID) of the network is returned to the communication application download unit 11 (step S33).

Next, the communication protocol 131 calls the communication provision / decision unit 133 with the identification information of the application to communicate, such as data transmission, and the network identifier acquired in steps S32 and S33 as arguments, A determination is made as to whether network communication is allowed or not (step S34). When called, the communication provision / decision unit 133 acquires the information of the accessible network from the application available network database 16 based on the received application identification information (step S35). Next, the communication provision / decision determination unit 133 determines whether the network identification information transmitted as the argument in step S34 is included in the identification information of the accessible network acquired in step S35, and the access protocol is determined by the communication protocol ( 131) (step S36).

Upon receiving the access grant / non-notification indicating that it is accessible, the communication protocol 131 executes an application transmission request (step S37). When inaccessible, the communication protocol 131 causes the application's transmission request to fail.

Third Embodiment

Next, a third embodiment of the present invention will be described. In the third embodiment, in addition to the communication device of the above-described second embodiment, means for inquiring the user about the judgment of whether to communicate is added. In order to realize this configuration, in the third embodiment, as illustrated in FIG. 5, the user determination unit 17 is added. The user judging unit 17 receives the network identification information from other parts such as the communication unit 13 when the judgment of the communication unit / unit is necessary. Received network identification information or information for determining the network is presented to the user. Furthermore, input of the communication part / part is received, and the judgment information of the received communication part / part is returned to another part which inputted the network identification information.

An operation example of the communication apparatus according to the third embodiment will be described below using the sequence chart of FIG. 6. First, when the application 14 intends to transmit data to the communication protocol 131 (step S61), the communication protocol 131 identifies the network used to communicate from the communication network information acquisition unit 132. Information is acquired (required) (step S62). In response to this request, the communication network information acquisition unit 132 specifies the bearer used by quoting the routing table based on the IP address of the communication partner, for example, and returns the information to the communication application download unit 11 ( Step S63). In addition, when the bearer specified by the communication network information acquisition unit 132 is a bearer connectable to a plurality of networks such as a wireless LAN network, the communication network information acquisition unit 132 determines the bearer and is currently connected. The identifier (for example, ESSID) of the network is returned to the communication application download unit 11 (step S63).

Next, the communication protocol 131 calls the communication provision / decision unit 133 with the identification information of the application to communicate, such as data transmission, and the network identifier obtained in steps S62 and S63 as arguments, A determination is made as to whether network communication is allowed or not (step S64). When called, the communication provision / decision unit 133 acquires the information of the accessible network from the application available network database 16 based on the received application identification information (step S65).

The communication provision / decision determination unit 133 determines whether the network identification information received as the argument in step S64 is included in the accessible network identification information acquired in step S65. If access is not possible (step S66), the communication decision unit 133 notifies the user determination unit 17 of the network identification information (step S67).

The user judging unit 17 converts the network identification information received from the communication part / sub decision unit 133 into network display information having a format that can be understood by the user. If the user can directly understand the network identification information received from the communication provision / decision unit 133, the network identification information is used as the network display information. The user judging section 17 presents the network display information in a visible state to the user as a selection dialog box, and allows the user to make a judgment of whether to connect or not. When the user inputs an instruction and communication is permitted, the user determination unit 17 notifies the communication permission / sub determination unit 133 of the communication permission (step S68). On the other hand, when the user rejects the communication, the user determination unit 17 notifies the communication permission / sub determination unit 133 of the communication rejection.

The communication provision / decision determination unit 133 permits the communication to be established by the application 14 in the case of the communication permission in accordance with the result of the user determination unit 17 (step S69). On the other hand, in the case of communication rejection, the communication provision / decision determination unit 133 rejects the communication that the application 14 intends to establish.

Upon receiving a notification of access grant / notation indicating that it is accessible, the communication protocol 131 executes an application transmission request (step S70). When inaccessible, the communication protocol 131 causes the application's transmission request to fail.

In addition, also in the communication apparatus of the third embodiment, the operation when the application 14 is downloaded by the communication application download unit 11 is similar to the communication apparatus of the second embodiment described using the sequence chart of FIG. It is the same.

The communication device according to the above-described embodiment is a computer device (server) including a CPU, a main memory device, an external storage device, a network connection device, and the like. By operating the CPU based on a program deployed in the main memory device, the above functions are realized. Each function may be distributed to a plurality of computer devices.

This application claims the priority based on Japanese Patent Application No. 2007-155768 for which it applied on June 12, 2007, and quotes all the indications here, It is not limited to the Example mentioned above, It can change suitably in the range which does not deviate from the meaning.

A function for restricting function execution by a communication network according to an exemplary aspect of the present invention is applicable to a communication device.

Claims (13)

As a communication device, Acquisition means for acquiring a communication status including information of a network used for acquisition of a communication application and a communication method used for acquisition; Determination means for determining a network usable by the communication application based on the communication status acquired by the acquisition means, and Communication means for performing communication by the communication application using a network determined by the determining means Communication device comprising a. The method of claim 1, And said communication means prohibits communication by said communication application when there is no network determined to be available by said determining means. The method of claim 1, If there is no network determined to be available by the determination means, further including user determination means for inquiring the user whether to permit communication by the communication application and accepting determination information input from the user, And said communication means performs communication by said communication application on the basis of the determination information received by said user determination means. The method of claim 1, And communication application acquiring means for acquiring the communication application. As a communication method, Acquiring a communication status including information of a network used for obtaining a communication application and a communication method used for obtaining,  Determining a network usable by the communication application based on the obtained communication situation; and Performing communication by the communication application using the determined network. Communication method comprising a. The method of claim 5, The step of performing the communication, And if there is no network determined to be available, prohibiting communication by the communication application. The method of claim 5, If there is no network determined to be available, asking the user whether to permit communication by the communication application, and receiving the judgment information input from the user, In the step of performing the communication, Communication by the communication application based on the received determination information. The method of claim 5, And acquiring the communication application. A computer-readable storage medium storing a program, The program causes the computer to A function of acquiring a communication status including information of a network used to acquire a communication application and a communication method used in the acquisition, A function of determining a network usable by the communication application using the prepared criterion prepared in advance based on the obtained communication situation; and A function of performing communication by the communication application using the determined network A computer readable storage medium for realizing this. 10. The method of claim 9, The function of performing the communication, And if there is no network determined to be available by the determining function, inhibiting communication by the communication application. 10. The method of claim 9, If there is no network determined to be available by the determining function, further including a function of asking a user whether to permit communication by the communication application and accepting judgment information input from the user, And the function of performing communication is to perform communication by the communication application based on the determination information received by the user determination means. 10. The method of claim 9, And a function for acquiring the communication application. The method of claim 1, And corresponding to the communication application, a database for storing the network determined to be available by the determining means, And said communication means performs communication by said communication application using a network stored in said database.

Images